What Is a Remote Access Scam? Lessons From a Crypto Theft Plot Run From Prison

A Scottish court jailed a man for a crypto theft plot run from prison that relied on AnyDesk. What remote access scams are and how to protect yourself.

Published: November 12, 2026

📌 Pinned Check a Wallet Address Before Sending Crypto – Free, No Sign-Up → or create a free account

A remote access scam is a fraud in which a criminal gets a victim to install or approve remote-control software, such as AnyDesk, TeamViewer or Windows Quick Assist, so the criminal can see and operate the victim's computer. In crypto, the goal is to move funds out of exchange accounts or wallet apps without hacking anything: the victim's own device does the work.

A court case in Scotland shows how far criminals will go to get that kind of access.

What happened in the Scottish case

On 10 November 2026, the High Court of Justiciary in Glasgow sentenced Robert Barr to eight years in prison for a plot to steal cryptocurrency worth up to about £2 million (reported as roughly $2.7 million). Two accomplices received four and five years. According to the reports listed below, all three had pleaded guilty to involvement in serious organised crime.

Here is what the reports describe:

Barr organised the plan from HMP Edinburgh, where he was already serving a sentence for fraud-related offences. Investigators seized his phone in June 2024 and found messages describing his instructions.
The target was a man in Midlothian whom Barr believed held a large amount of crypto. Reports say an earlier burglary, in January 2024, took a wallet, but the funds could not be reached without its PIN.
The second plan was different. Two accomplices were supposed to get the homeowner to install AnyDesk on his computer, so Barr could control it from his cell and send the funds to accounts he controlled.
On 17 April 2024, at around 11:30 p.m., two men came to the house. The couple saw them on a doorbell camera and did not open the door. The men left.

Judge Lord Cubie reportedly said the crime "married 21st-century computer sophistication with old-fashioned housebreaking." Reports also say that organising an offence from prison counted as an aggravating factor.

Outlets differ on some details, for example whether the first stolen wallet was a hardware wallet, so this article sticks to what several of them report. Crypto news and court details can change, so read the court's own sentencing statement on the Judiciary of Scotland website (judiciary.scot) and compare more than one source yourself.

Why do criminals want remote access instead of a seed phrase?

Because a PIN and a recovery phrase are hard to get, while a person is easier to pressure. In the case above, a stolen wallet without its PIN was reportedly useless, and the next plan aimed at the owner's computer instead.

A remote session lets an attacker see your screen, open your exchange account or wallet app, read codes that appear on screen and push you to approve actions. The software itself is legitimate, so security tools often do not flag it.

Can a remote access session steal crypto from a hardware wallet?

In normal use, a hardware wallet signs transactions inside the device, so software on the computer does not get the recovery phrase. But someone who controls your computer can change what you see on the screen, swap addresses or pressure you to confirm something. That is why the address shown on the device's own display is the one to trust, as explained in verifying an address on your hardware wallet screen. It is also worth understanding how far a hardware wallet protects you against a drainer.

What should you do if someone asks you to install remote software?

Do not install or approve remote-control software because someone asked, whether by phone, chat, email or in person. Fake helpers often pose as exchange or wallet staff, as described in how fake crypto support accounts steal wallet credentials. Genuine support rarely, if ever, needs control of your computer, so check on the company's official website how it really helps customers.
If you already gave access, disconnect from the internet, close and uninstall the tool, and then use a different, clean device to change passwords, sign out of all sessions and review withdrawal settings and API keys on your exchange accounts.
Never type a recovery phrase into a computer, a website or a support chat. If you are not sure what it is, start with what a seed phrase is.
Do not open your door to strangers at night. In this case, the couple's decision not to open it is why the plot failed.

How can you lower the risk of being targeted?

Criminals look for people who are known to hold crypto. Showing your balances or wallet addresses publicly can help them, and wallet addresses can sometimes be linked to a real identity. Keep your holdings private, store your backup offline and know what happens if you lose a hardware wallet's recovery sheet before it matters.

Details of cases and rules change, so verify anything important yourself, ideally in several sources and not just one.